Role passwords

  • From: "Jason Heinrich" <jheinrichdba@xxxxxxxxx>
  • To: oracle-l <oracle-l@xxxxxxxxxxxxx>
  • Date: Mon, 4 Feb 2008 15:06:08 -0600

According to the documentation, role passwords are designed to prevent users
from directly accessing application data without going through the
application interface.  Has anyone used them on human-oriented roles, such
as DBA?  We have a requirement to protect all "critical" roles with
passwords, but given their shortcomings (no password management through
profiles, multiple people may need to know the password, etc.), it seems to
me that they would be more of a hinderance than a help.  Thoughts?

-- 
Jason Heinrich

Other related posts: